Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
File: 7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft (raw, json)
Hash identifier: PiIbd6SKEtPAHrfGrqWbM2/WQAlmKLm5wGxsILqIr2I=
Subject key identifier: 25:9E:AA:45:7E:C8:22:D4:F7:24:B9:39:1A:3C:E4:D6:6F:9C:7A:D7
Authority key identifier: ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96
Certificate issuer: /CN=ed740702247a2feaccdebe13a9842cffd3b40c96
Certificate serial: 0198D6600EE8A4B943F5DB459234CD24519A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:01:16 +0000
Manifest this update: Sat 23 Aug 2025 10:01:16 +0000
Manifest next update: Sun 24 Aug 2025 10:01:16 +0000
Files and hashes: 1: 7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl (hash: +CBKzUqLObsBL9CSodf/F2TAIg5kVK3AhSWfjq2iR3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:0e:e8:a4:b9:43:f5:db:45:92:34:cd:24:51:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed740702247a2feaccdebe13a9842cffd3b40c96
Validity
Not Before: Aug 23 10:01:16 2025 GMT
Not After : Aug 24 10:01:16 2025 GMT
Subject: CN=259eaa457ec822d4f724b9391a3ce4d66f9c7ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e0:13:fb:27:91:38:c3:a8:0b:81:10:0b:2b:
f0:06:a4:0d:a9:5f:73:1b:11:62:88:c0:7b:30:e9:
ad:97:e8:7b:1c:de:92:cc:3f:3a:7e:bd:31:af:85:
d8:5e:f5:8f:57:7d:17:a2:75:de:9c:a9:d8:d9:c7:
74:29:4b:bd:96:b0:1b:a7:9d:5b:c0:07:69:53:d3:
6b:56:08:9f:81:89:5c:c8:a0:57:95:57:c2:d6:4f:
e2:14:34:2b:7e:0a:77:eb:91:2a:6e:d3:fe:7d:7c:
5e:a3:05:52:42:aa:40:e6:b8:d0:a1:4c:68:4b:20:
7b:49:cd:40:d6:ca:99:af:85:13:53:45:ba:83:7b:
43:34:08:2f:7b:ae:ec:82:c1:1d:43:5e:54:c0:cd:
8f:cb:0d:36:0d:4f:6c:67:36:1c:33:f6:f6:d7:4c:
30:1f:d2:2c:82:f9:a5:96:e8:88:07:5a:1a:54:ee:
53:7d:b6:6e:9f:56:2f:00:77:ee:79:8c:c6:ed:21:
9e:5e:5c:f2:31:ea:1b:2c:13:5a:58:b2:aa:e6:9c:
80:2e:3b:ea:a3:ee:90:ef:70:ad:06:f8:c3:94:d9:
da:e4:8c:c6:ad:c3:26:2e:f8:43:ad:d5:6b:aa:eb:
3a:42:31:da:f7:6f:2b:5a:de:eb:df:bc:82:32:66:
55:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9E:AA:45:7E:C8:22:D4:F7:24:B9:39:1A:3C:E4:D6:6F:9C:7A:D7
X509v3 Authority Key Identifier:
keyid:ED:74:07:02:24:7A:2F:EA:CC:DE:BE:13:A9:84:2C:FF:D3:B4:0C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XQHAiR6L-rM3r4TqYQs_9O0DJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/477cde-ec71-478a-8a6f-5cdc3f4b62be/1/7XQHAiR6L-rM3r4TqYQs_9O0DJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:57:32:60:12:2e:fc:ac:66:9c:57:02:78:5c:72:d1:ae:db:
87:9f:e7:99:77:37:49:04:db:e3:fa:8b:db:cf:c5:cc:50:ce:
8e:f9:2d:8b:0e:85:ab:d4:06:45:9a:04:e7:d9:33:92:08:7e:
ae:bb:c5:ee:5e:4a:26:13:11:bd:69:5c:6e:9a:a5:0f:9b:9c:
64:dd:7b:20:34:b2:0e:5c:92:29:ad:aa:4d:b1:82:07:66:17:
f2:f2:cc:92:d5:0c:af:3d:19:a1:4e:60:c7:67:8c:b2:46:30:
27:77:e9:b7:5f:55:be:d4:50:6f:3b:ff:e9:e1:d1:d3:22:59:
97:54:b3:05:fc:66:06:44:1f:ee:b2:49:03:33:04:c1:f2:08:
59:9c:b0:29:a5:c8:fc:59:69:d6:78:90:e1:c9:6a:bf:0d:c2:
e4:ab:7c:86:03:f0:64:81:a5:7c:3e:2a:2b:66:81:b5:22:07:
35:75:53:a9:c3:ad:86:e2:91:a0:da:20:69:ee:06:13:4a:be:
7f:4d:eb:a5:2e:fe:fa:d6:58:74:47:c4:a5:06:83:04:e3:fe:
fe:a7:55:88:6b:16:eb:64:78:c6:97:67:04:c1:a2:a6:f1:6e:
1b:84:09:be:08:42:1a:36:51:d4:88:be:1f:ed:5c:9b:1e:ca:
3f:39:1b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:15:09 2025 by rpki-client